acknowledge the elephant in the room

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 4 of 4

F8Labs

f8-120500-vpnet.txt

Posted Dec 7, 2000

Authored by Loki, f8labs | Site f8labs.com

VPNet Technologies VSU VPN appliances have serious remote vulnerabilities. A source routing flaw in VSU allows for unauthenticated connections to a target host on protected LAN of VPN, and a flaw in NOS bridging code causes VSU to pass spoofed private address packets from it's public interface to the private network.

tags | remote, spoof, vulnerability

MD5 | 842563e9a74d9ce032ecd3ad2b09bdc3

Download | Favorite | Comments (0)

f8-112000-bbr2.txt

Posted Nov 26, 2000

Authored by Loki, f8labs | Site f8labs.com

The here.

MD5 | 21febb10ad01b7d525539eebd27b3505

Download | Favorite | Comments (0)

f8-103100-realsecure.txt

Posted Nov 6, 2000

Authored by Loki, f8labs | Site f8labs.com

RealSecure by ISS v5.0 fails to detect attacks using the year old IIS 5 RDS bug and the recent UNICODE hole.

MD5 | 2261582d30dba416f267fcbda218180f

Download | Favorite | Comments (0)

mantrap-info.tgz

Posted Nov 6, 2000

Authored by Loki, f8labs | Site f8labs.com

ManTrap, a commercial honeypot, can easily be identified and subverted. The process hiding can be detected by sending a signal to each PID, there are /proc inconsistancies, the first 4 processes always get hidden, the inode number is off, and the chroot can be broken via raw device access. Includes mantrap.c, a exploit which checks for the first 3 issues.

MD5 | adb35a5fd09dfa0559f43701f39ecb48

Download | Favorite | Comments (0)